local group / global group permissions problem

From: Chuck (no.one_at_no.where)
Date: 08/18/05 

Date: Thu, 18 Aug 2005 12:42:58 -0400

Windows 2003 file server in an Active Directory domain
Firewall between server and domain crontroller

I have a share on the Windows 2003 server. I also have a local group on
that server. The local group has full rights to the share. The local group
contains a global group from the Active Directory domain.

User in global group should be able to access the shared folder based on the
local group's permissions. He can't.

If I add the global group directly to the folder's permissions, then it
works.

Could it be a problem with a firewall between the server with the local
group and the domain controller with the global group?

Thanks

Relevant Pages

  • Re: DC added to workgroup now has problems
    ... > to get our department AD server to work properly on this new network. ... A trust relationship essentially says: I, the trusting domain, is giving the ... Never give permissions to a global group, ... user membership to a local group if that user comes from a trusted domain. ...
    (microsoft.public.win2000.networking)
  • Re: local group / global group permissions problem
    ... I agree that it does not appear that it is the firewall. ... > of the global group appears to me to effectively rule out firewall as ... > to purge its connection / sessions and thus reauthenticate to the server. ... >> contains a global group from the Active Directory domain. ...
    (microsoft.public.windows.server.security)
  • Re: Allowing a Helpdesk User, or Group, to add users to a specific gro
    ... Add the Global Group to the Local Group on the server ... > application that has been installed that the Local Administrators are not ...
    (microsoft.public.windows.server.active_directory)
  • Re: local group / global group permissions problem
    ... That applying the global group directly allows access for a member ... to purge its connection / sessions and thus reauthenticate to the server. ... > contains a global group from the Active Directory domain. ...
    (microsoft.public.windows.server.security)
  • Re: Need Advice
    ... One other thing to be aware of: VMWARE and Virtual Server are useful ... Active Directory domain, im also setting up a Disaster Recovery Site for ... Controllers in our Production site and a File Server that is a Member ... additional Active Directory Domain Controller are also Active Directory ...
    (microsoft.public.windows.server.active_directory)